This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft File: MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft (raw, json) Hash identifier: sEDin/sfFyeKMzLR694LyX1CInO9SQxHu4SJBt1i1Tk= Subject key identifier: A3:27:31:97:03:0F:38:33:6F:15:FC:CC:F9:C5:E7:8C:2C:B6:2F:8A Authority key identifier: 31:31:1C:FC:C1:40:1B:D6:D0:E6:B6:B3:91:67:B6:5C:21:09:21:14 Certificate issuer: /CN=A91E3493/serialNumber=31311CFCC1401BD6D0E6B6B39167B65C21092114 Certificate serial: 50 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft Manifest number: 43 Signing time: Sat 24 Jan 2026 22:49:26 +0000 Manifest this update: Sat 24 Jan 2026 22:49:26 +0000 Manifest next update: Sat 31 Jan 2026 22:49:26 +0000 Files and hashes: 1: MTEc_MFAG9bQ5razkWe2XCEJIRQ.crl (hash: lU3EKdjF05tD11LlMIdU5QRU750GwMKMBZqMAeDmw5k=) 2: 474BBE8AA5FF11F08004B67CC4F9AE02.roa (hash: SMOUlqbPMt2kafk5s8X5CGmsl0wmXm2GKsiELLusKwQ=) 3: 485C422CA5FF11F08004B67CC4F9AE02.roa (hash: UyaIPOR5BtYKD7ht1J5Z5vKBp3WQiWRuvIXcjTfMuds=) 4: 4988E222A5FF11F08004B67CC4F9AE02.roa (hash: y8ARtlnKOFD/ZdcLD/y5W8SXczj42QeGDvwDvopZPC8=) 5: 47D5EEA2A5FF11F08004B67CC4F9AE02.roa (hash: Yq/6jVPQzAm5hgRP7rXQoplDCQWlPs9QKDxMJ3MAfy8=) 6: 48DA881CA5FF11F08004B67CC4F9AE02.roa (hash: U7Bt5g8XtBArxtex2r2qjcE8yon03irN5KZgG3SqjtY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.crl rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 22:49:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 80 (0x50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3493, serialNumber=31311CFCC1401BD6D0E6B6B39167B65C21092114 Validity Not Before: Jan 24 22:49:26 2026 GMT Not After : Jan 31 22:49:26 2026 GMT Subject: CN=69754c76-c124 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:27:87:9e:c9:ef:3c:2c:a9:6d:de:9d:18:fb: ec:24:6f:9f:10:06:5d:90:f1:91:5e:a7:fe:f2:b3: 93:62:b2:5a:3f:45:d4:c4:e1:aa:d7:3b:3c:14:76: ca:78:aa:94:07:28:53:a7:1d:5a:7c:b1:4a:68:d4: d5:1b:92:47:f3:e9:a3:5d:d5:59:7e:a3:fb:e6:6a: e5:6c:4e:a1:1f:b3:a9:ef:a2:b3:2b:a1:ba:ee:28: 0d:1b:6e:4d:04:58:fc:e1:50:42:39:c9:88:7d:7d: cd:10:74:af:33:e2:03:93:a0:24:dd:e9:fd:5a:85: 01:fa:be:d7:8e:3f:1f:50:15:dd:f4:04:c9:b9:bd: 13:98:f6:73:84:e2:a8:ad:f0:e9:f7:08:07:3f:04: 0d:08:f2:36:cd:b7:69:18:fe:b7:e2:e5:af:22:24: d3:1e:e8:4f:0d:61:d0:68:5d:99:7f:b0:99:ad:91: a9:a1:63:f3:f8:97:3f:71:9d:9a:26:67:bd:b6:f9: 85:71:27:06:75:52:d8:aa:b8:86:d8:1b:9c:81:ab: 4e:9d:fe:48:38:39:e5:08:2b:5f:83:7d:96:68:73: 7d:22:66:95:75:f5:7f:1c:d2:3b:0c:f0:11:9a:8a: 19:fa:3d:af:b4:06:a5:c6:1d:70:30:70:b6:1e:56: 99:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:27:31:97:03:0F:38:33:6F:15:FC:CC:F9:C5:E7:8C:2C:B6:2F:8A X509v3 Authority Key Identifier: keyid:31:31:1C:FC:C1:40:1B:D6:D0:E6:B6:B3:91:67:B6:5C:21:09:21:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:22:1f:ec:0b:a6:b7:75:a3:e6:ca:9e:0c:2b:a9:1b:04:0c: 70:d7:4c:eb:28:a5:90:df:a5:b0:79:52:98:86:04:6c:d2:d2: 93:44:fb:70:6c:58:31:e8:59:cf:1f:d2:99:05:ca:1e:c3:f4: 0d:06:da:75:a2:a0:ad:89:a2:54:0b:0d:76:c1:cb:32:f9:5c: 9c:a5:ba:9a:9b:58:fd:d5:8a:29:29:da:48:7a:af:2b:0c:cd: 07:bc:af:17:63:c0:cc:26:23:ce:56:5d:c7:6d:5f:97:46:09: 5d:c3:18:62:36:aa:db:af:74:ca:ff:c0:fc:ed:e4:46:78:63: 5e:cd:22:26:21:03:c9:99:42:37:b7:d8:80:99:61:d5:da:3f: a6:c3:22:71:f9:bd:4b:df:4b:67:ef:69:ce:14:30:91:95:4b: 31:83:b0:9f:f1:a4:39:95:8a:1e:33:3a:d3:4c:1a:54:47:a4: a4:9a:37:17:6f:bf:04:73:89:ec:14:a5:73:6a:21:77:fa:6b: f3:2c:64:f6:be:da:65:d8:a5:69:af:cd:80:55:93:17:4f:2f: 23:7e:34:c9:2e:91:ca:b3:32:f1:15:99:60:71:86:20:9c:c1: d8:a0:e7:2d:f9:7b:9f:96:3b:bb:e8:6f:15:12:c6:75:9a:41: 16:47:4e:1b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MzQ5MzExMC8GA1UEBRMoMzEzMTFDRkNDMTQwMUJENkQwRTZCNkIzOTE2N0I2NUMy MTA5MjExNDAeFw0yNjAxMjQyMjQ5MjZaFw0yNjAxMzEyMjQ5MjZaMBgxFjAUBgNV BAMMDTY5NzU0Yzc2LWMxMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJJ4eeye88LKlt3p0Y++wkb58QBl2Q8ZFep/7ys5Nislo/RdTE4arXOzwUdsp4 qpQHKFOnHVp8sUpo1NUbkkfz6aNd1Vl+o/vmauVsTqEfs6nvorMrobruKA0bbk0E WPzhUEI5yYh9fc0QdK8z4gOToCTd6f1ahQH6vteOPx9QFd30BMm5vROY9nOE4qit 8On3CAc/BA0I8jbNt2kY/rfi5a8iJNMe6E8NYdBoXZl/sJmtkamhY/P4lz9xnZom Z722+YVxJwZ1UtiquIbYG5yBq06d/kg4OeUIK1+DfZZoc30iZpV19X8c0jsM8BGa ihn6Pa+0BqXGHXAwcLYeVpnpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUoycxlwMP ODNvFfzM+cXnjCy2L4owHwYDVR0jBBgwFoAUMTEc/MFAG9bQ5razkWe2XCEJIRQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUzNDkzL0U1MkMxNEMwOUZG QTExRjBCQUQ1MEI2MUM0RjlBRTAyL01URWNfTUZBRzliUTVyYXprV2UyWENFSklS US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTVRFY19NRkFHOWJRNXJhemtXZTJYQ0VKSVJRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUz NDkzL0U1MkMxNEMwOUZGQTExRjBCQUQ1MEI2MUM0RjlBRTAyL01URWNfTUZBRzli UTVyYXprV2UyWENFSklSUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIoiH+wLprd1o+bKngwrqRsEDHDXTOsopZDfpbB5UpiGBGzS0pNE+3Bs WDHoWc8f0pkFyh7D9A0G2nWioK2JolQLDXbByzL5XJylupqbWP3Viikp2kh6rysM zQe8rxdjwMwmI85WXcdtX5dGCV3DGGI2qtuvdMr/wPzt5EZ4Y17NIiYhA8mZQje3 2ICZYdXaP6bDInH5vUvfS2fvac4UMJGVSzGDsJ/xpDmVih4zOtNMGlRHpKSaNxdv vwRziewUpXNqIXf6a/MsZPa+2mXYpWmvzYBVkxdPLyN+NMkukcqzMvEVmWBxhiCc wdig5y35e5+WO7vobxUSxnWaQRZHThs= -----END CERTIFICATE-----Generated at Sun Jan 25 11:52:44 2026 by rpki-client